Read the docs

Triangle MicroWorks

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Triangle MicroWorks records in CISA KEV

No Triangle MicroWorks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

22 records in Scada Data Gateway · all components

Priority MEDIUM 50

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05226 Published 2020-04-15 No fix listed CWE-843
Priority MEDIUM 49

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestric…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2023-06-07 No fix listed CWE-134
Priority MEDIUM 44

Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02298 Published 2024-05-07 No fix listed CWE-22
Priority LOW 38

Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03442 Published 2024-05-03 No fix listed CWE-22
Priority LOW 31

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log ou…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00593 Published 2023-06-07 No fix listed CWE-306
Priority LOW 26

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01791 Published 2014-05-30 Fixed in v3.00.0635 CWE-400
Priority LOW 11

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00346 Published 2014-05-30 Fixed in v3.00.0635 CWE-400
Open these records in search →